Linux Distros Unpatched Vulnerability : CVE-2017-2508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the WebKit component. It...

Linux Distros Unpatched Vulnerability : CVE-2018-11243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PackLinuxElf64::unpack in plxelf.cpp in UPX 3.95 allows remote attackers to cause a denial of service double free, limit the ability of a malware scanner to...

Linux Distros Unpatched Vulnerability : CVE-2018-19965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service host OS crash because GP0 can occur after a...

Linux Distros Unpatched Vulnerability : CVE-2016-7506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability was observed in Spreplaceregexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A...

Linux Distros Unpatched Vulnerability : CVE-2017-2814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing...

Linux Distros Unpatched Vulnerability : CVE-2017-8053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PoDoFo 0.9.5 allows denial of service infinite recursion and stack consumption via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure PdfParser.cpp...

Linux Distros Unpatched Vulnerability : CVE-2018-19789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1...

Linux Distros Unpatched Vulnerability : CVE-2015-0565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. CVE-2015-0565 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2019-12589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the...

Linux Distros Unpatched Vulnerability : CVE-2008-4677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - autoload/netrw.vim aka the Netrw Plugin 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP...

Linux Distros Unpatched Vulnerability : CVE-2022-50208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: soc: amlogic: Fix refcount leak in meson-secure-pwrc.c In mesonsecurepwrcprobe, there is a...

Malicious code in axe-core-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e542b3a8db6b222894a578af53bb9c3d386c930cc296809a2b2ddaac3b31c18 The OpenSSF Package Analysis project identified 'axe-core-scanner' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41281 Malicious code in axe-core-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e542b3a8db6b222894a578af53bb9c3d386c930cc296809a2b2ddaac3b31c18 The OpenSSF Package Analysis project identified 'axe-core-scanner' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Linux Distros Unpatched Vulnerability : CVE-2023-5981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct...

Photon OS 5.0: Linux PHSA-2025-5.0-0598

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0598. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2022-22965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the...

Linux Distros Unpatched Vulnerability : CVE-2025-8736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the...

Linux Distros Unpatched Vulnerability : CVE-2025-8579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific ...

Linux Distros Unpatched Vulnerability : CVE-2024-25620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose...

Linux Distros Unpatched Vulnerability : CVE-2024-6162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener. This issue arises becau...